EDGE SECURITY · TRAFFIC CONTROL · CRITICAL SYSTEMS
FORMA Box
Real-time visibility and guided control
to connected environments
Bring IoT Traffic Out
of the Black Box
Connected equipment often communicates with services, domains and locations that operators cannot see. This lack of visibility makes it difficult to distinguish essential traffic from unnecessary behaviour, misconfiguration or a developing attack.
FORMA Box creates a controlled observation point at the network edge. It continuously analyses device activity, detects security threats and enables administrators to accept, block or override traffic-control decisions from a clear management interface.
What FORMA Box Delivers
- Edge-based visibility Discover connected devices and understand how each device communicates without installing software on every endpoint.
- Real-time threat detection Monitor network behaviour, run targeted checks and receive notifications when FORMA identifies security or privacy exposure.
- Destination control Review allowed and restricted destinations, approve automatic decisions or apply your own device-level policy.
How FORMA Box Works
- Deploy at the edge. Connect the protected devices through the FORMA-enabled gateway.
- Discover devices. Use AI-assisted identification to recognise devices and assign an initial name, type and vendor profile.
- Monitor and test. Combine passive traffic observation with direct security checks to identify vulnerabilities and anomalous behaviour.
- Evaluate risk. Enrich findings with vulnerability and security information, including CVE data and relevant NIST and ENISA sources.
- Respond and verify. Notify administrators, recommend a traffic-control decision and allow the user to accept or override it.
- Visualise and export. Review device activity, destination countries, restricted traffic and platform statistics, then export traffic evidence for further analysis.
Core Capabilities
- Automatic device identification Recognise devices as they join the protected environment and allow administrators to refine their profile.
- Per-device protection Enable or disable FORMA controls for individual devices according to operational needs.
- Threat notifications Alert administrators when suspicious or vulnerable behaviour is detected.
- Domain and destination control Manage restricted and allowed destinations, including customised domain decisions.
- Traffic geolocation Visualise destination countries and compare requested traffic with controlled traffic.
- Activity analytics Review device-level activity, restricted traffic and aggregate security statistics.
- Evidence export Export traffic activity as CSV for investigation, reporting or integration into wider workflows.
Designed for Operational Environments
FORMA Box is suited to environments where connected equipment cannot remain an invisible part of the network. It supports security teams that need continuous awareness and a practical response mechanism without disrupting the devices they protect.
- Critical infrastructure and industrial connected systems
- Transport, energy and operational technology environments
- Enterprise and public-sector IoT deployments
- Connected buildings, cameras and distributed edge equipment
- Service providers and security integrators
FORMA Box and CertifIoT
The two products solve different parts of the connected-security problem. FORMA Box focuses on operational visibility, anomaly detection and traffic control at the edge. CertifIoT focuses on continuous compliance assessment and structured evidence. Together, they can connect real-world device behaviour with security action and compliance insight.
Frequently Asked Questions
Does FORMA Box replace the existing network gateway?
FORMA is deployed as an edge control point or through compatible gateway software. The appropriate topology depends on the protected environment and should be confirmed during solution design.
Can an administrator override a decision?
Yes. The supplied interface allows an administrator to accept an automatic traffic-control decision or override it and manage allowed or restricted destinations.
What can operators visualise?
Operators can review detected threats, device activity, traffic destinations by country, restricted activity by device and aggregate usage statistics.
Can FORMA Box support investigations and reporting?
Yes. Device traffic can be exported as CSV for further analysis and evidence workflows.
Put Connected Traffic Back Under Your Control
Discover what your devices are doing, identify suspicious behaviour
and act on unnecessary connections from the network edge.